PT-2006-5437 · Amazing Little · Amazing Little Picture Poll+1

Alperen + 1 · Publicado 2006-09-09 · Atualizado 2018-10-17 · CVE-2006-4652

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Amazing Little Poll versions (affected versions not specified) Amazing Little Picture Poll versions (affected versions not specified)

Description The issue concerns default passwords in the software, allowing remote attackers to create new polls by entering these default credentials. Specifically, the default password "dsapoll" can be used to access the system via the lp admin.php endpoint, enabling unauthorized creation of polls.

Recommendations For Amazing Little Poll, change the default password "dsapoll" to a unique and secure password. For Amazing Little Picture Poll, change the default password "dsapoll" to a unique and secure password. As a temporary workaround, consider restricting access to the lp admin.php endpoint until secure passwords are implemented.

Correção

Identificadores relacionados

CVE-2006-4652

Produtos afetados

Amazing Little Picture Poll

Amazing Little Poll

Referências · 5

• http://securityfocus.com/archive/1/445081/100/0/threaded · Nota
• http://securityreason.com/securityalert/1527 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4652 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28737 · Nota
• http://securityfocus.com/bid/19837 · Nota